CVE-2026-48039
2 advisories.
PyPI/meta-ads-mcp CVE-2026-48039: critical 9.1, EPSS 0.59%
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Action: Upgrade meta-ads-mcp to 1.0.109 or later.
pip install meta-ads-mcp==1.0.109Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.109 | - |
Fixed versions
| 1.0.109 |
Sources
- osv: GHSA-9gw6-46qc-99vr
- https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr
- https://nvd.nist.gov/vuln/detail/CVE-2026-48039
- https://github.com/pipeboard-co/meta-ads-mcp
- https://github.com/pipeboard-co/meta-ads-mcp/releases/tag/1.0.109
- https://github.com/pypa/advisory-database/tree/main/vulns/meta-ads-mcp/PYSEC-2026-413.yaml
CVE-2026-48039 · published · modified · JSON
PyPI/meta-ads-mcp CVE-2026-48039: critical 9.1, EPSS 0.59%
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Action: Upgrade meta-ads-mcp to 1.0.109 or later.
pip install meta-ads-mcp==1.0.109Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.109 | - |
Fixed versions
| 1.0.109 |
Sources
- osv: PYSEC-2026-413
- https://github.com/pipeboard-co/meta-ads-mcp/security/advisories/GHSA-9gw6-46qc-99vr
- https://github.com/pipeboard-co/meta-ads-mcp
- https://github.com/pipeboard-co/meta-ads-mcp/releases/tag/1.0.109
- https://pypi.org/project/meta-ads-mcp
- https://github.com/advisories/GHSA-9gw6-46qc-99vr
- https://nvd.nist.gov/vuln/detail/CVE-2026-48039
CVE-2026-48039 · published · modified · JSON